Behavioral task
behavioral1
Sample
2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b.dll
Resource
win10v2004-20230831-en
General
-
Target
2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b
-
Size
26KB
-
MD5
1c7a0387c0788d8eb8d5e6cf9f5adf05
-
SHA1
bbd02470b3e52861a07a92b7873eb9f543404207
-
SHA256
2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b
-
SHA512
633db6895eab1353cc17c127b79d3ecce15f023f2029fcd05f4112c5ebb7c5cd6274480cb67bdc7b80596a2520bb57fa109ae2da3ae5973b3f46bf8b71d4067e
-
SSDEEP
768:snXxGRM7DPBu5TXfznIXQ3FaQ9nbcuyD7Uv7:sXrBOLn2Q3Faynouy8v
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b
Files
-
2bd97f3954abbe5ce138329af84f0f9df71dc9f4eb54b8dd63d811e3eeffd39b.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE